High · published October 28, 2025
⚡ A crafty LSA Update packet is all it takes to trigger a NULL pointer dereference in FRRouting, leading to a Denial of Service (DoS). Think of this like a restaurant where a single false order can crash the entire kitchen — just one malformed request could send everything spiraling into chaos, making the service unavailable. An attacker could exploit this vulnerability to flood the system with specially crafted packets, resulting in service downtime and disruption for users. This could leave your network vulnerable and inaccessible while you scramble to restore operations.
Think of this like a restaurant where a single false order can crash the entire kitchen — just one malformed request could send everything spiraling into chaos, making the service unavailable. The NULL pointer dereference occurs in the `show_vty_ext_pref_pref_sid` function at `ospf_ext.c`, allowing attackers to crash the FRRouting service by sending a malformed LSA Update. This vulnerability affects versions 4.0 through 10.4.1.
An attacker could exploit this vulnerability to flood the system with specially crafted packets, resulting in service downtime and disruption for users. This could leave your network vulnerable and inaccessible while you scramble to restore operations. To protect your systems, upgrade FRRouting to the latest version beyond 10.4.1 immediately. Additionally, consider implementing strict packet filtering to mitigate the risk of crafted packets reaching your network. You've got this! Follow these steps, and you'll keep your network safe and sound. 🛡️